{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5T2NWEO347ZQR4OJKVRLCIW6QR","short_pith_number":"pith:5T2NWEO3","canonical_record":{"source":{"id":"2312.06227","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-11T09:14:42Z","cross_cats_sorted":[],"title_canon_sha256":"cb053b48f88436ad6c971dcbeeeeb946b309504caf56c402b3075340a4b1c24e","abstract_canon_sha256":"459a9650d12e6559850c9894c2cd4948d7113086d5d5c6db786c76ba587ae047"},"schema_version":"1.0"},"canonical_sha256":"ecf4db11dbe7f308f1c95562b122de84460b3f7e68a0b1808b67a8bcf88c9c8d","source":{"kind":"arxiv","id":"2312.06227","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.06227","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2312.06227v1","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.06227","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"5T2NWEO347ZQ","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"5T2NWEO347ZQR4OJ","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"5T2NWEO3","created_at":"2026-07-05T07:22:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5T2NWEO347ZQR4OJKVRLCIW6QR","target":"record","payload":{"canonical_record":{"source":{"id":"2312.06227","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-11T09:14:42Z","cross_cats_sorted":[],"title_canon_sha256":"cb053b48f88436ad6c971dcbeeeeb946b309504caf56c402b3075340a4b1c24e","abstract_canon_sha256":"459a9650d12e6559850c9894c2cd4948d7113086d5d5c6db786c76ba587ae047"},"schema_version":"1.0"},"canonical_sha256":"ecf4db11dbe7f308f1c95562b122de84460b3f7e68a0b1808b67a8bcf88c9c8d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:22:40.844620Z","signature_b64":"BawEUVcPnRkbip4+MlbOlOmtJdbQN40j54TektMdQVwV8WxpuJEXyjIofyDvYCgfvU4GSsbeatWg4yooRJxaBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ecf4db11dbe7f308f1c95562b122de84460b3f7e68a0b1808b67a8bcf88c9c8d","last_reissued_at":"2026-07-05T07:22:40.844064Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:22:40.844064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.06227","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z1o8LhBzVU9dfuLQCJiFLIZRlOpsfQPf37KtCjRHG1ZzRIbppiwNOxUtvjxFrZYysLaYFCp5KwLnsVVO0mJqDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:33:55.027663Z"},"content_sha256":"c7984919852b689051c32592241c07d057d674a43be4df881be05f0ed0004927","schema_version":"1.0","event_id":"sha256:c7984919852b689051c32592241c07d057d674a43be4df881be05f0ed0004927"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5T2NWEO347ZQR4OJKVRLCIW6QR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poisoned ChatGPT Finds Work for Idle Hands: Exploring Developers' Coding Practices with Insecure Suggestions from Poisoned AI Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Doowon Kim, Hyoungshick Kim, Kiho Lee, Sanghak Oh, Seonhye Park","submitted_at":"2023-12-11T09:14:42Z","abstract_excerpt":"AI-powered coding assistant tools have revolutionized the software engineering ecosystem. However, prior work has demonstrated that these tools are vulnerable to poisoning attacks. In a poisoning attack, an attacker intentionally injects maliciously crafted insecure code snippets into training datasets to manipulate these tools. The poisoned tools can suggest insecure code to developers, resulting in vulnerabilities in their products that attackers can exploit. However, it is still little understood whether such poisoning attacks against the tools would be practical in real-world settings and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.06227","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.06227/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KHv1LQaKGYDA9pRjNsRM2eNu8QiAi81tPGKeDhI1QKCKfTQbzhEgxECeIxndkenUtitwhvIQ4BXyfoY8DZ4vBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:33:55.028034Z"},"content_sha256":"db8c683d8cf6bf8924633de5c28752a275230aba982878463739605b2c6c85bb","schema_version":"1.0","event_id":"sha256:db8c683d8cf6bf8924633de5c28752a275230aba982878463739605b2c6c85bb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/bundle.json","state_url":"https://pith.science/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:33:55Z","links":{"resolver":"https://pith.science/pith/5T2NWEO347ZQR4OJKVRLCIW6QR","bundle":"https://pith.science/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/bundle.json","state":"https://pith.science/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5T2NWEO347ZQR4OJKVRLCIW6QR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5T2NWEO347ZQR4OJKVRLCIW6QR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"459a9650d12e6559850c9894c2cd4948d7113086d5d5c6db786c76ba587ae047","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-11T09:14:42Z","title_canon_sha256":"cb053b48f88436ad6c971dcbeeeeb946b309504caf56c402b3075340a4b1c24e"},"schema_version":"1.0","source":{"id":"2312.06227","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.06227","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2312.06227v1","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.06227","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"5T2NWEO347ZQ","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"5T2NWEO347ZQR4OJ","created_at":"2026-07-05T07:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"5T2NWEO3","created_at":"2026-07-05T07:22:40Z"}],"graph_snapshots":[{"event_id":"sha256:db8c683d8cf6bf8924633de5c28752a275230aba982878463739605b2c6c85bb","target":"graph","created_at":"2026-07-05T07:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.06227/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI-powered coding assistant tools have revolutionized the software engineering ecosystem. However, prior work has demonstrated that these tools are vulnerable to poisoning attacks. In a poisoning attack, an attacker intentionally injects maliciously crafted insecure code snippets into training datasets to manipulate these tools. The poisoned tools can suggest insecure code to developers, resulting in vulnerabilities in their products that attackers can exploit. However, it is still little understood whether such poisoning attacks against the tools would be practical in real-world settings and ","authors_text":"Doowon Kim, Hyoungshick Kim, Kiho Lee, Sanghak Oh, Seonhye Park","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-11T09:14:42Z","title":"Poisoned ChatGPT Finds Work for Idle Hands: Exploring Developers' Coding Practices with Insecure Suggestions from Poisoned AI Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.06227","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c7984919852b689051c32592241c07d057d674a43be4df881be05f0ed0004927","target":"record","created_at":"2026-07-05T07:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"459a9650d12e6559850c9894c2cd4948d7113086d5d5c6db786c76ba587ae047","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-11T09:14:42Z","title_canon_sha256":"cb053b48f88436ad6c971dcbeeeeb946b309504caf56c402b3075340a4b1c24e"},"schema_version":"1.0","source":{"id":"2312.06227","kind":"arxiv","version":1}},"canonical_sha256":"ecf4db11dbe7f308f1c95562b122de84460b3f7e68a0b1808b67a8bcf88c9c8d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ecf4db11dbe7f308f1c95562b122de84460b3f7e68a0b1808b67a8bcf88c9c8d","first_computed_at":"2026-07-05T07:22:40.844064Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:22:40.844064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BawEUVcPnRkbip4+MlbOlOmtJdbQN40j54TektMdQVwV8WxpuJEXyjIofyDvYCgfvU4GSsbeatWg4yooRJxaBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:22:40.844620Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.06227","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c7984919852b689051c32592241c07d057d674a43be4df881be05f0ed0004927","sha256:db8c683d8cf6bf8924633de5c28752a275230aba982878463739605b2c6c85bb"],"state_sha256":"5b897507a9b0b47b599cadaffe2a4ae4072c75c4300f0bd8cdddca2ff42431c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3NvhlUcwxApUOiRUU9QTfM06cPjxXhU3RgjzM/7nUHItml6k4TGDdUpwNoX9LEkv9tCwiE8MtvkXzZ3U51v+Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:33:55.030839Z","bundle_sha256":"68e07d40eb423650631552cf673e94bf19bd1cb97d0d91ba2a768ecefc8f8975"}}